HCCA CHC/CHPC COMPLIANCE CERTIFICATION EXAM STUDY
GUIDE: 200 COMPREHENSIVE EXAM QUESTIONS COVERING
ALL TESTED DOMAINS WITH DETAILED ANSWERS AND
RATIONALES
1. Which element is MOST critical for establishing the independence
of a compliance officer within a healthcare organization?
A. Reporting directly to the Chief Financial Officer
B. Having unrestricted access to the governing body
C. Managing the organization's billing department
D. Relying on external consultants for all decisions
Answer: B
Rationale: Independence is best demonstrated by direct, unrestricted
access to the governing body, ensuring compliance concerns can be
escalated without operational interference.
2. A governing board is reviewing its compliance oversight duties.
Which action BEST fulfills its responsibility?
A. Personally conducting internal fraud investigations
B. Approving every single employee disciplinary action
C. Receiving regular reports on high-risk compliance areas
D. Delegating all compliance oversight to the IT department
Answer: C
Rationale: The board is responsible for oversight, which includes staying
informed about major compliance risks through meaningful reporting.
,3. An organization's code of conduct should primarily serve to:
A. Outline specific billing codes for reimbursement
B. Communicate ethical standards and expected behaviors
C. Detail the financial penalties for HIPAA violations
D. Replace all departmental standard operating procedures
Answer: B
Rationale: A code of conduct sets the foundational ethical tone and
outlines the expected behavior for all workforce members.
4. When developing a compliance work plan, what is the MOST
appropriate approach?
A. Auditing every single department with equal frequency
B. Prioritizing based on identified compliance risks
C. Selecting topics based on alphabetical order
D. Only auditing areas that had no prior issues
Answer: B
Rationale: A risk-based approach ensures that limited compliance
resources are directed toward the areas of greatest potential exposure.
5. Which metric provides the BEST evidence of a compliance
program's effectiveness?
A. The total number of policies written
B. The length of the employee handbook
C. Measurable reductions in identified compliance risks
D. The frequency of unannounced staff meetings
Answer: C
Rationale: Effectiveness is demonstrated through outcomes, such as the
reduction of risks, improved audit results, and successful remediation.
,6. An employee calls the compliance hotline to report suspected
improper billing. What should be the FIRST step?
A. Immediately terminate the billing manager
B. Document the intake and conduct a preliminary assessment
C. Require the employee to confront the billing manager directly
D. Publicly disclose the allegation to the entire department
Answer: B
Rationale: All reports must be properly documented and assessed to
determine the appropriate scope of the investigation.
7. Which law prohibits healthcare providers from submitting false
claims to federal healthcare programs?
A. The Stark Law
B. The False Claims Act
C. The HITECH Act
D. The Anti-Kickback Statute
Answer: B
Rationale: The False Claims Act (FCA) is the primary federal law
imposing liability for submitting false or fraudulent claims for payment.
8. What is the primary focus of the Anti-Kickback Statute (AKS)?
A. Prohibiting self-referrals for designated health services
B. Preventing the exchange of anything of value to induce referrals
C. Regulating the privacy of protected health information
D. Establishing minimum necessary standards for data sharing
Answer: B
Rationale: The AKS criminalizes the knowing and willful payment or
receipt of remuneration to induce or reward patient referrals.
, 9. Under HIPAA, the "minimum necessary" standard applies to:
A. All disclosures of protected health information (PHI)
B. Only disclosures for treatment purposes
C. Only disclosures to law enforcement
D. Disclosures for payment and operations
Answer: D
Rationale: The minimum necessary standard generally applies to
disclosures for payment and healthcare operations, but not to
disclosures for treatment.
10. A compliance officer discovers a conflict between a departmental
policy and a regulatory requirement. What should they do FIRST?
A. Immediately delete the departmental policy
B. Determine the applicable requirement and assess the conflict
C. Report the department manager to the governing board
D. Ignore the conflict if the department is meeting its budget
Answer: B
Rationale: The first step is to fully understand the regulatory
requirement and evaluate how the conflicting policy creates
organizational risk.
11. Which component is MOST essential for an effective compliance
training program?
A. Providing the exact same training to all employees
B. Role-based training tailored to specific job functions
C. Training only when a violation occurs
D. Focusing exclusively on financial penalties
Answer: B
Rationale: Role-based training ensures that employees receive relevant
information applicable to their specific duties and risks.
GUIDE: 200 COMPREHENSIVE EXAM QUESTIONS COVERING
ALL TESTED DOMAINS WITH DETAILED ANSWERS AND
RATIONALES
1. Which element is MOST critical for establishing the independence
of a compliance officer within a healthcare organization?
A. Reporting directly to the Chief Financial Officer
B. Having unrestricted access to the governing body
C. Managing the organization's billing department
D. Relying on external consultants for all decisions
Answer: B
Rationale: Independence is best demonstrated by direct, unrestricted
access to the governing body, ensuring compliance concerns can be
escalated without operational interference.
2. A governing board is reviewing its compliance oversight duties.
Which action BEST fulfills its responsibility?
A. Personally conducting internal fraud investigations
B. Approving every single employee disciplinary action
C. Receiving regular reports on high-risk compliance areas
D. Delegating all compliance oversight to the IT department
Answer: C
Rationale: The board is responsible for oversight, which includes staying
informed about major compliance risks through meaningful reporting.
,3. An organization's code of conduct should primarily serve to:
A. Outline specific billing codes for reimbursement
B. Communicate ethical standards and expected behaviors
C. Detail the financial penalties for HIPAA violations
D. Replace all departmental standard operating procedures
Answer: B
Rationale: A code of conduct sets the foundational ethical tone and
outlines the expected behavior for all workforce members.
4. When developing a compliance work plan, what is the MOST
appropriate approach?
A. Auditing every single department with equal frequency
B. Prioritizing based on identified compliance risks
C. Selecting topics based on alphabetical order
D. Only auditing areas that had no prior issues
Answer: B
Rationale: A risk-based approach ensures that limited compliance
resources are directed toward the areas of greatest potential exposure.
5. Which metric provides the BEST evidence of a compliance
program's effectiveness?
A. The total number of policies written
B. The length of the employee handbook
C. Measurable reductions in identified compliance risks
D. The frequency of unannounced staff meetings
Answer: C
Rationale: Effectiveness is demonstrated through outcomes, such as the
reduction of risks, improved audit results, and successful remediation.
,6. An employee calls the compliance hotline to report suspected
improper billing. What should be the FIRST step?
A. Immediately terminate the billing manager
B. Document the intake and conduct a preliminary assessment
C. Require the employee to confront the billing manager directly
D. Publicly disclose the allegation to the entire department
Answer: B
Rationale: All reports must be properly documented and assessed to
determine the appropriate scope of the investigation.
7. Which law prohibits healthcare providers from submitting false
claims to federal healthcare programs?
A. The Stark Law
B. The False Claims Act
C. The HITECH Act
D. The Anti-Kickback Statute
Answer: B
Rationale: The False Claims Act (FCA) is the primary federal law
imposing liability for submitting false or fraudulent claims for payment.
8. What is the primary focus of the Anti-Kickback Statute (AKS)?
A. Prohibiting self-referrals for designated health services
B. Preventing the exchange of anything of value to induce referrals
C. Regulating the privacy of protected health information
D. Establishing minimum necessary standards for data sharing
Answer: B
Rationale: The AKS criminalizes the knowing and willful payment or
receipt of remuneration to induce or reward patient referrals.
, 9. Under HIPAA, the "minimum necessary" standard applies to:
A. All disclosures of protected health information (PHI)
B. Only disclosures for treatment purposes
C. Only disclosures to law enforcement
D. Disclosures for payment and operations
Answer: D
Rationale: The minimum necessary standard generally applies to
disclosures for payment and healthcare operations, but not to
disclosures for treatment.
10. A compliance officer discovers a conflict between a departmental
policy and a regulatory requirement. What should they do FIRST?
A. Immediately delete the departmental policy
B. Determine the applicable requirement and assess the conflict
C. Report the department manager to the governing board
D. Ignore the conflict if the department is meeting its budget
Answer: B
Rationale: The first step is to fully understand the regulatory
requirement and evaluate how the conflicting policy creates
organizational risk.
11. Which component is MOST essential for an effective compliance
training program?
A. Providing the exact same training to all employees
B. Role-based training tailored to specific job functions
C. Training only when a violation occurs
D. Focusing exclusively on financial penalties
Answer: B
Rationale: Role-based training ensures that employees receive relevant
information applicable to their specific duties and risks.
